静态审计 MCP 服务可访问范围，并检测声明与清单配置偏差。
Static blast-radius audit for MCP servers before agent install. Manifest optional.
Advisory AOS agent health scan before deployment (manifest, services, immune loop, evidence).
